Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Expand iptables module #1109

Open
adam-stokes opened this issue Oct 27, 2016 · 0 comments
Open

Expand iptables module #1109

adam-stokes opened this issue Oct 27, 2016 · 0 comments

Comments

@adam-stokes
Copy link

So I have these commands I want to use with Rex iptables:

# /sbin/iptables -A INPUT -p tcp --dport 80 -i eth0 -m state --state NEW -m recent --set
# /sbin/iptables -A INPUT -p tcp --dport 80 -i eth0 -m state --state NEW -m recent --update --seconds 60  --hitcount 15 -j DROP

The problem I run into is with the -m <match> [match options]. So I would need to create an arrayref for the match arg

m => [['state', '--state NEW'],['recent', '--update --seconds 60  --hitcount 15']]

This is an example me and @ferki talked about but maybe there is an easier solution? Otherwise I think the stance would be if you need something more advanced then to write a custom module to handle that use case.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant